DNS The world’s most successful distributed database—and the most naïve. The Domain Name System is one of the Internet’s oldest protocols, designed for a network without hostile users. Intruders targeting a network start by investigating their DNS. DNS Security Extensions, or DNSSEC, hardens DNS and brings it into the 21st century. Learning DNSSEC required wading through years of obsolete tutorials, dead ends, and inscrutable standards. Until now. This new edition of DNSSEC Mastery will have DNS administrators deploying DNSSEC with industry-standard software in hours instead of weeks. You will: · Understand what DNSSEC provides · Configure your servers to resist attack · Verify your environment supports modern DNS · Debug DNSSEC and the Chain of Trust · Sign your zones and attach them to the Chain of Trust · Conceal zone data with NSEC3 · Automate DNSSEC maintenance · Roll over keys to maintain integrity · Implement DNSSEC on private networks · Securely distribute security-critical information via DNS And more! DNSSEC Mastery transforms DNS from a headache to a solution.

OpenBSD, the elegant, highly secure Unix-like operating system, is widely used as the basis for critical DNS servers, routers, firewalls, and more. This long-awaited second edition of Absolute OpenBSD maintains author Michael Lucas's trademark straightforward and practical approach that readers have enjoyed for years. You'll learn the intricacies of the platform, the technical details behind certain design decisions, and best practices, with bits of humor sprinkled throughout. This edition has been completely updated for OpenBSD 5.3, including new coverage of OpenBSD's boot system, security features like W^X and ProPolice, and advanced networking techniques. You'll learn how to: –Manage network traffic with VLANs, trunks, IPv6, and the PF packet filter –Make software management quick and effective using the ports and packages system –Give users only the access they need with groups, sudo, and chroots –Configure OpenBSD's secure implementations of SNMP, DHCP, NTP, hardware sensors, and more –Customize the installation and upgrade processes for your network and hardware, or build a custom OpenBSD release Whether you're a new user looking for a complete introduction to OpenBSD or an experienced sysadmin looking for a refresher, Absolute OpenBSD, 2nd Edition will give you everything you need to master the intricacies of the world's most secure operating system.

“I’m glad someone’s finally giving ed the attention it deserves.” – Ken Thompson, co-creator of Unix Let me be perfectly clear: ed is the standard Unix text editor. If you don’t know ed, you’re not a real sysadmin. Forty years after ed’s introduction, internationally acclaimed author Michael W Lucas has finally unlocked the mysteries of ed for everyone. With Ed Mastery, you too can become a proper sysadmin. Ed Mastery will help you: · understand buffers and addresses · insert, remove, and mangle text · master file management and shell escapes · comprehend regular expressions, searches, and substitutions · create high-performance scripts for transforming files You must be at least this competent to use this computer. Read Ed Mastery today!

Secure Shell (SSH) lets systems administrators securely manage remote systems. But most people only use the bare minimum SSH offers. Used properly, SSH simplifies your job. This book saves you from sifting a decade of obsolete online tutorials and quickly gets you running: SSH with the OpenSSH server and the PuTTY and OpenSSH clients. You will: Eliminate passwords. Manage access to your SSH server by users, groups, addresses, and more Securely move files around your network Forward graphic displays from one host to another Forward TCP connections Centrally manage host keys and client configurations Use SSH as a secure transport for other applications Secure applications run over SSH Build Virtual Private Networks with OpenSSH And more! This book simplifies the work of anyone using SSH. Small enough to read and implement quickly, exhaustive enough to include everything most of us need plus a little more. Master SSH with SSH Mastery.

Transport Layer Security, or TLS, makes ecommerce and online banking possible. It protects your passwords and your privacy. Let’s Encrypt transformed TLS from an expensive tool to a free one. TLS understanding and debugging is an essential sysadmin skill you must have. TLS Mastery takes you through: · How TLS works · What TLS provides, and what it doesn’t · Wrapping unencrypted connections inside TLS · Assessing TLS configurations · The Automated Certificate Management Environment (ACME) protocol · Using Let’s Encrypt to automatically maintain TLS certificates · Online Certificate Status Protocol · Certificate Revocation · CAA, HSTS, and Certificate Transparency · Why you shouldn’t run your own CA, and how to do it anyway · and more! Stop wandering blindly around TLS. Master the protocol with TLS Mastery!